CVE-2015-7547

CVE-2015-7547 refers to a stack-based buffer overflow in the GLIBC libresolv DNS resolver path, triggered by dual A/AAAA DNS queries in getaddrinfo. The vulnerability could allow remote code execution or crash the process when handling crafted DNS responses, with exploitation possible via the nss...

CVE-2016-4429

CVE-2016-4429: In glibc, a stack-based buffer overflow in sunrpc/clnt_udp.c:clntudp_call can be triggered by a flood of crafted ICMP/UDP packets, enabling a remote attacker to cause a denial of service (crash) and possibly other impact. Connected docs confirm the issue as a buffer overflow in the...

CVE-2016-1234

CVE-2016-1234 affects the glibc glob implementation prior to 2.24, where a stack-based buffer overflow occurs when GLOB_ALTDIRFUNC is used with long names. This can crash the process (DoS). Remediation: upgrade glibc to 2.24 or newer (or apply vendor-specific patches). The CVE is corroborated by ...

CVE-2015-8776

The CVE-2015-8776 issue affects the GNU C Library (glibc) strftime() function. The vulnerability, present in glibc versions before 2.23, allows context-dependent attackers to cause a denial of service (application crash) and, in some disclosures, potentially obtain sensitive information via out-o...

CVE-2015-8777

CVE-2015-8777 is a local, environment-variable–driven bypass of the glibc pointer-guarding mechanism. The flaw exists in the GNU C Library (glibc) prior to version 2.23, where the LD_POINTER_GUARD environment variable was not ignored for privileged executions, allowing a local attacker to bypass ...

CVE-2014-9761

The CVE-2014-9761 issue affects the GNU C Library (glibc) prior to 2.23. It involves stack-based buffer overflows in the nan, nanf, and nanl functions caused by long arguments, which could lead to denial of service or potentially arbitrary code execution. Mitigation in the provided documents reco...

CVE-2016-3075

CVE-2016-3075 is a stack-based overflow in glibc’s nss_dns getnetbyname implementation (getnetbyname/getnetbyname_r) that can be triggered by excessively long network names, leading to stack consumption and application crash (denial of service). Connected documents identify the vulnerability as a...

CVE-2015-8779

CVE-2015-8779 affects the GNU C Library (glibc). The vulnerability is a stack-based buffer overflow in the catopen() function when handling long catalog names, which can cause an application crash (DoS) or potentially allow arbitrary code execution. Affected products include glibc releases prior ...

CVE-2015-8778

CVE-2015-8778 affects the GNU C Library (glibc) prior to 2.23, where an integer/size argument in hcreate_r can trigger an out-of-bounds heap access, potentially causing denial of service or arbitrary code execution. Connected advisories detail that multiple products (notably glibc-containing pack...

CVE-2016-3706

CVE-2016-3706 is a glibc (GNU C Library) vulnerability: a stack-based buffer overflow in sysdeps/posix/getaddrinfo.c:getaddrinfo can be triggered by hostent conversion and allows remote attackers to cause a denial of service (crash). The entry notes this issue stems from an incomplete fix for CVE...

CVE-2016-6323

The CVE-2016-6323 issue affects GNU C Library (glibc) on ARM EABI (32-bit): makecontext creates execution contexts incompatible with the unwinder, potentially allowing a context-dependent attacker to cause a denial of service (hang) in apps (notably gccgo). The vulnerability is fixed in glibc 2.2...